2.3. Download and extract

The current version of samhain can be downloaded from http://www.la-samhna.de/samhain/samhain-current.tar.gz. Older versions of samhain are available from the online archive. You should always make sure that you have a complete and unmodified version of samhain. This can be done by verifying the PGP signature (see below).

The downloaded tarball will contain exactly two files:

1. A tarball named samhain-N.N.N.tar.gz (N.N.N is the version number) containing the source tree, and

2. the PGP signature for this tarball, i.e. a file named samhain-N.N.N.tar.gz.asc.

sh$ wget http://la-samhna.de/samhain/samhain-current.tar.gz
sh$ gunzip samhain-current.tar.gz | tar tvf -
-rw-r--r-- 500/100      920753 2004-05-24 19:57:55 samhain-1.8.8.tar.gz
-rw-r--r-- 500/100         189 2004-05-24 19:58:29 samhain-1.8.8.tar.gz.asc

You might wish to verify the PGP signature now, in order to make sure that you have received a complete and unmodified version of samhain. All samhain releases are signed with the key 0F571F6C (Rainer Wichmann).

Key fingerprint = EF6C EF54 701A 0AFD B86A F4C3 1AAD 26C8 0F57 1F6C

sh$ gpg --keyserver blackhole.pca.dfn.de --recv-keys 0F571F6C
sh$ gpg --verify samhain-N.N.N.tar.gz.asc samhain-1.8.8.tar.gz

Now you can proceed to extract the source tarball:

sh$ gunzip samhain-N.N.N.tar.gz | tar tvf -

This will create a new subdirectory samhain-N.N.N under your current directory. You should cd into this subdirectory to proceed with configuring the source:

sh$ cd samhain-N.N.N